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REMARKS 

The Examiner has rejected Claims 1-13, 15, 17-29, 31, and 33-44 under 35 U.S.C. 
103(a) as being unpatentable over Chen et al. (U.S. Patent No. 5.951,698) in view of 
Bates et al. (U.S. Patent No. 6,721,721) and in view of Perelson et al. (U.S. Patent No. 
5,448,668). AppHcant respectfully disagrees with such rejection, especially in view of 
the amendments made hereinabove to each of the independent claims. Specifically, 
applicant has incorporated the subject matter of dependent Claims 36-37 et al. into each 
of the independent claims. 

With respect to each of the independent claims, the Examiner responded to 
applicant's last submitted arguments and amendments by presenting the following 
arguments: 

'Column 5 lines 10^52 recite "a wide variety of application data 
files may be included iii the memory such as word processiig? 
spreadsheet drawing progratns, the memory may include Microsoft 
word as word processing. Excel as spreadsheet..." and further 
discloses (column 6. lines 10-67) .. examinen targeted files to 
^h^^^^"^l, r^^"" they are of a type that may include macro ... 
rSn!" targeted file is a template file „ checking file 
extension such as .DOC. Therefore Chen et al clearly discloses 
£iles organized based on a type of application,' 

-Bates et al discloses a database comprises set of indexes and 
narti/?'"'%^?"''"! information with indexes associated with 
! t^^^^^"" files (column 6, line 35 through column 7), files may 
lilt ^^^'''r^ according to type of application (column 8, 
^3? line 35^" "° ^ line 15 through column 

It appears that the Examiner is simply not considering the Ml weight and 
organization of applicant's claim language. Whether or not Cheny^ates discloses files 
organized based on apphcation type, Chen/Bates does not organize "sets of the indices 
and the macro vims definition data files . . . based on a type of application to which Ihe 
macro applies" (emphasis added), as claimed. Further, it appears that the Examiner has 
simply not taken into consideration that applicant claims require organizing "sets of the 
indices and the macro virus definition data files . . . into a hierarchy" (emphasis added), as 
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claimed. Only applicant teaches and claims a hierafchv of sets of indices and macro vin^ 
definidoDdata, organized based on a type f.f appli cation to which the macro anolie. 

The Examiner goes onto argues that Perelson et al discloses a hierarchical parse 
tree. Note below: 

"Perelson et al discloses parsing a suspect file into tokens 
comprising one of individual string constants and source code 
text and storingr the tokens as suspect strings into a 
hierarchical parse tree (Column 2. line 50 through column 42 and 
column 7, line 45 through column 9)." 

However, after a careful review of such reference in its entirety, applicant asserts 
that Perelson make absolutely no mention of a hierarchical data strucnire, let alone 
organizing "sets of the indices and the macro vini^ defi nitinn Hatn fiT^c . . . into a 
hierarchy ," (emphasis added) as claimed. Again, the Examiner's new proposed 
combination still fails to meet applicant's claimed hierarchy of sets of the indices and the 
. macro virus definition data , organized based on a tvne of anolication to which the macm 
applies . 

To establish a prima fade case of obviousness, three basic criteria must be met. 
First, there must be some suggestion or motivation, either in the references themselves or 
in the knowledge generaUy available to one of ordinary skill in the art, to modify the 
reference or to combine reference teachings. Second, there must be a reasonable 
expectation of success. FinaUy, the prior art reference (or references when combined) 
must teach or suggest all the claim limitations. The teaching or suggestion to make the 
claimed combination and the reasonable expectation of success must both be found in the 
prior art and not based on applicant's disclosure. In re Vaeck947 F.2d 488, 20 USPQ2d 
1438 (Fed.Cir. 1991). 

AppUcant respectfiiUy asserts that at least the third element of the prima facie 
case of obviousness has not been met, since the prior art references, when combined, fail 
to teach or suggest of the claim limitations, as noted above. Nevertheless, despite 
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such paramount deficiencies and in the spirit of expediting the prosecution of the present 
application, applicant has substantially incorporated the subject matter of Claims 36-37 et 
al, into each of the independent claims. 

In the latest action, the Examiner relies on the following blanket excerpts fix)m 
Chen to make a prior art showing of the limitations of Claims 36-37. In particular, the 
Examiner cites col. 8, line 40 ^ coJ. 9, line 15; col. 12. lines 3-40; col. 13, line 20 - col. 

14. However, after careful review ofsuch excerpts, applicant respectfully asserts that the ■ 
emphasized language below is clearly absent from such reference, contrary to the 
Examiner's assertion: 

•Svherein the macro virus definitions database stores at least oneofstrin p 
constants and source code text common to c„ n h macro vims f amily in tbft ma^m 
yirus attributes for the macro viru.s definiti nn data filft<; and the macro virus 
checker fiafflparing the suspect string to the at l^ gst one of strinp constants and 
source code text in the one or more macro vmi s definition riat;, files for ea^h 
macro virus family! 

Wherein a parameter is utilized for specifying a threshold to mat<>,h^ ^ nf 
commonly shared at least one of string const a nts and soTirr.ft mH/. tAvt » (emphasis 
added). 

Since at least the third element of tho prima facie case of obviousness has not 
been met, a notice of allowance or a specific prior art showing of all of the claim 
limitations, in the context of the remaining elements, is respectfully requested. 

Thus, all of the independent claims are deemed allowable. Moreover, the 
remaining dependent claims are further deemed allowable, in view of their dependence 
on such independent claims. 

In the event a telephone conversation would expedite the prosecution of this 
application, the Examiner may reach the undersigned at (408) 505-5 100. The 
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Commissioner is authorized to charge any additional fees or credit any overpayment to 
Deposit Account No. 50-1351 (OrderNo.NAIlP373/99.ni.01). 



Respectfully M^ttitted, 
Zilka-K^Jt^j^. 



P.O. Box 721120 

San Jose, CA 95172-1 120 

408-505-5100 



K&vWJ. Zilka 
Re^tration No. 41,429 
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